Failed domain controller still listed as DNS server

Hello Experts,

I have two servers:

PDC = Server 2008 R2 = 'Server1' =
BDC = Server 2003 - 'Server2' =

there used to be another, which failed completely (replaced by Server 2008R2)
PDC = Server 2003 = 'Server3' =

The FSMO roles were successfully transferred and all of the ADUC, ADSS, DNS entries were cleaned up to remove Server3 as per MS documentation, however when I do an NSLOOKUP of the internal domain from any of the servers and PCs on the network, the IP address of the failed 'Server3' is still listed.

Can anyone suggest where else I should check for references to this server?  

Thank you in advance!
Who is Participating?
footechConnect With a Mentor Commented:
If the command you're running is something like
Then those results are returned by any records in the zone that appear with a name "same as parent".  Those records are used to lookup a DC when a service is not site-aware (can't use the DCLocator process).  So look for a "same as parent" A record with the IP of your failed DC.
When you looked in DNS, did you look in the Name Servers?  If it was a DC, you can't just remove the A record, you have to go into the Name Servers and remove that instance.

Also, did you demote it correctly?  If not then there may still be metadata in place.  You can go in Sites and Services and check to see if the DC is located in there.
fourthgenAuthor Commented:
Hello cshepfam,

Yes, have removed entries from Name Servers tab in DNS.
No chance to demote it due to catastrophic RAID failure; Sites and Services has all been cleaned up according to MS documentation such as example below:
WEBINAR: GDPR Implemented - Tips & Lessons Learned

Join the WatchGuard team on Thursday, March 29th as we recount some valuable lessons learned in weighing the needs of a business against the new regulatory environment, look ahead at the two months left before implementation, and help you understand the steps you can take today!

FOXActive Directory/Exchange EngineerCommented:
Have you checked for the entry in reverse lookups in your DNS as well?
fourthgenAuthor Commented:
Excellent, sorted! - I must've missed this several times when combing through the DNS entries as it didn't reference the server by name.

Thank you footech.
Glad to help.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.